Consular Lookout and Support System 



Exhibit 300: Part I : Summary Information and Justification (All Capital Assets) 



I .A. Overview 



1. Date of Submission: 


8/14/2006 


2. Agency: 


Department of State 


3. Bureau: 


CA/EX/CSD Consular Systems Division 


4. Name of this Capital Asset: 


consular lookoul ana bupport bystem 


5. Unique Project (Investment) Identifier: (For IT investment only, 
see section 53. For all other, use agency 1 D system.) 


014-00-01-03-01-1154-00 


6. What kind of investment will this be in FY2008? (Please NOTE: 
1 nvestments moving to O&M ONLY in FY2008, with 
Planning/ Acquisition activities prior to FY2008 should not select 
O&M. These investments should indicate their current status.) 


Operations and Maintenance 


7. What was the first budget year this investment was submitted to 
OMB? 


FY2001 or earlier 



8. Provide a brief summary and justification for this investment, including a brief description of how this closes in part or in whole an 
identified agency performance gap: 

CLASS is an automated system developed and maintained by Consular Affairs (CA), which is used by DOS, Passport Agency centers, and US Consulates. This system is used to 
perform name-checks of visa and passport applicants in support of the issuance process and US border security. Access to CLASS is made available to other authorized US 
Government agencies upon request. CLASS operates as a central processing system from two processing centers. CLASS currently uses a combination of mainframe and small 
server hardware. Tasking is currently underway to migrate off of the mainframe hardware. The newer small server platform (also known as eCLASS) can be migrated to other 
locations and is currently being considered as a name check option by several other agencies. The eCLASS system is an evolution of CLASS; therefore no development 
milestones or associated costs are evident. They are part of the ongoing O&M of CLASS. Future enhancements to the CLASS system will include: 1) Providing an interface ability, 
which will allow CLASS to be interfaced with other applications (iCLASS), thereby providing the name matching capabilities to these applications, namely, the CCD (Consular 
Consolidated Database), eDV (Electronic Diversity Visa application), and CRISIS (Crisis Reporting Information System) 2) Providing an address matching capability similar to the 
current name matching capability (aCLASS). Exposing associations with addresses (or near matching addresses) will promote the discovery of associations between visa 



applicants and suspected terrorists, drug, or violent gang affiliations. 


9. Did the Agency's Executive/ 1 nvestment Committee approve this 
request? 


Yes 


a. 1 f "yes," what was the date of this approval? 


8/4/2006 


10. Did the Project Manager review this Exhibit? 


Yes 


12. Has the agency developed and/ or promoted cost effective, energy 
efficient and environmentally sustainable techniques or practices for 
this project. 


Yes 


a. Will this investment include electronic assets (including 
computers)? 


Yes 



b. I s this investment for new construction or major retrofit of a No 
Federal building or facility? (answer applicable to non-1 T assets only) 



1 



1. If "yes," is an ESPC or UESC being used to help fund this 
in vesrmen l. 


No 


2. If "yes," will this investment meet sustainable design 
principles? 


No 


3. If yes, is it designed to be 30% more energy efficient than 

rp|pu>i nt* rnrip' 

1 CICVallL LUUCi 




13. Does this investment support one of the PMA initiatives? 


Yes 


If yes, check all that apply! 


Expanded E-Government 


ijd. tsrieriy oescripe now mis asset oirecny supports rne icientiTieci 
initiative(s)? 


V>-L/-\Z>Z) bUppUIlb Ulc Ubc Ul lllc ClfcrLUUlllL Vlbd /-\(J|Jlll_aUUI 1 rUIIll (LVMr) III v_UIlbUlal rUblb 

around the world which helps automate internal processes to reduce costs internally, 
within the Federal Government, by disseminating best practices across agencies. This 
supports Expanded E-Government. 


14. Does this investment support a program assessed using the 
Program Assessment Rating Tool (PART)? (For more information 
about the PART, visit www.whitehouse.gov/ omb/ part.) 


No 


a. If "yes," does this investment address a weakness found during 
the PART review? 


No 


b. If "yes," what is the name of the PART program assessed by 
OMB's Program Assessment Rating Tool? 


c. If "yes," what PART rating did it receive? 


15. Is this investment for information technology? 


Yes 


If the answer to Question: "Is this investment for information technology?" was "Yes," complete this sub-section. If the answer is "No," do 
not answer this sub-section. 


For information technology investments only: 




16. What is the level of the IT Project? (per CIO Council PM Guidance) 


Level 2 


17. What project management qualifications does the Project 
Manager have? (per CIO Council PM Guidance): 


(1) Project manager has been validated as qualified for this investment 


18. Is this investment identified as "high risk" on the Q4 - FY 2006 
agency high risk report (per OMB's "high risk" memo)? 


No 


19. Is this a financial management system? 


No 


a. If "yes," does this investment address a FFMI A compliance area? 


No 


1. If "yes," which compliance area: 


Not Applicable 


2. If "no," what does it address? 


b. If "yes," please identify the system name(s) and system acronym(s) as reported in the most recent financial systems inventory update 
required by Circular A-ll section 52 




20. What is the percentage breakout for the total FY2008 funding request for the following? (This should total 100% ) 


Hardware 


15 



2 



Software 



15 



Services 


70 


Other 


0 


21. If this project produces information dissemination products for 
the public, are these products published to the 1 nternet in 
conformance with OMB Memorandum 05-04 and included in vour 
agency inventory, schedules and priorities? 


Yes 


23. Are the records produced by this investment appropriately 
scheduled with the National Archives and Records Administration's 
approval? 


Yes 



I.D. Performance Information 



I n order to successfully address this area of the exhibit 300, performance goals must be provided for the agency and be linked to the annual 
performance plan. The investment must discuss the agency's mission and strategic goals, and performance measures must be provided. 
These goals need to map to the gap in the agency's strategic goals and objectives this investment is designed to fill. They are the internal and 
external performance benefits this investment is expected to deliver to the agency (e.g., improve efficiency by 60 percent, increase citizen 
participation by 300 percent a year to achieve an overall citizen participation rate of 75 percent by FY 2xxx, etc.). The goals must be clearly 
measurable investment outcomes, and if applicable, investment outputs. They do not include the completion date of the module, milestones, 
or investment, or general goals, such as, significant, better, improved that do not have a quantitative or qualitative measure. 

Agencies must use Table 1 below for reporting performance goals and measures for all non-1 T investments and for existing IT investments 
that were initiated prior to FY 2005. The table can be extended to include measures for years beyond FY 2006. 



Performance I nformation Table 1: 



i 



Fiscal 
Year 


Strategic Goal(s) Supported 


Performance Measure 


Actual/ baseline (from 
Previous Year) 


Planned Performance Metric 
(Target) 


Performance Metric Results 
(Actual) 


2000 


Strategic Goal 12: Management 
and Organizational Excellence 


Add additional algorithm to 
handle Arabic names 


100% complete 


10% Increase in better 
namecheck results in Arabic 
names 


20% Increase in better 
Namecheck results in Arabic 
names. 


2000 


Strategic Goal 12: Management 
and Organizational Excellence 


Add Additional Russian/Slavic 
Algorithm 


100% complete 


10% increase in better 
namecheck results for 
Russian/Slavic names. 


20% increase in better 
namecheck results for 
Russian/Slavic names. 


2000 


Strategic Goal 12: Management 
and Organizational Excellence 


Achieve System certification 


100% complete 


Verify and validate System 
certification 


Verified and Validated System 
certification 


2001 


Strategic Goal 12: Management 
and Organizational Excellence 


Bring online an additional 
processing engine for CLASS 


100% complete 


Improve response time for 
namecheck query by 10% 


Response time for namecheck 
query improved by over 10% 


2001 


Strategic Goal 12: Management 
and Organizational Excellence . 


|Add Additional Hispanic 
Algorithm 


100% Completed 


Improve 10% namecheck results 
of Hispanic names by 


|No Improvement due to delay of 
adding new algorithm 


2001 


Strategic Goal 3: Homeland 
Security, Strategic Goal 2: 


Improve efficiency and 
effectiveness of adjudication 


500 queries per day 


2,000 queries per day 


2,500 queries per day 



3 





Counterterrorism, Strategic Goal 
11: ruDiic Diplomacy and ruonc 
Affairs 


process by expanding consular 
omcer access to American 
citizen services and visa data in 
the Consular Consolidated 
Database. 








2002 


Strategic Goal 3: Homeland 
becunty, strategic uoai Z: 
Counterterrorism, Strategic Goal 
11: Public Diplomacy and Public 
Affairs 


Provide agencies involved in 

L"V ■ ■ a>« ■ a ■ 1 a * I 4* lab aaaa II a a • aaai aaa. 

□order security witn an visa 
issuance data produced each 
day. 


10% of all visa issuance data 
produced eacn day is provided 
to other border security 
agencies 


Il00% visa issuance data 
provided per day 


100% visa issuance data 
provided per day 


zUUo 


btrategic uoai iz. Management 
and Organizational Excellence 


Decrease to id percentage ot 
name checks processed by DNC 
(Distributed NameCheck 
System) 


iuuto complete 


Not Appncaoie, dnl. no longer in 
use. 


Not Appncaoie, dnl. no longer in 
use. 


2003 


Strategic Goal 12: Management 
and Organizational Excellence 


Decrease PBNC( Passport Backup 
NameCheck System) use to 
24% 


100% Complete 


Not Applicable, PBNC no longer 
in use. 


|Not Applicable, PBNC no longer 
in use. 


2004 


Strategic Goal 12: Management 
and Organizational Excellence 


East Asian Processing (no longer 
called an Algorithm) Include 
special Teatures and processes 
for the handling of East Asian 
names such as Korean, Chinese, 
Japanese, etc. 


6 Algorithms currently reside in 
CLASS 


Milestones for languages: 
Korean-Spring '05, Chinese- 
bummer/hail ud, inai- 
Summer '05, 1 ndian - 
Summer/Fall '05, Vietnamese & 
Japanese - Spring '06 


Korean Special Features is 
intended for release in April '05, 
cninese likely to toiiow in 
summer. 


2004 


Strategic Goal 3: Homeland 
Security, Strategic Goal 6: 
American Citizens 


Namecheck Effectiveness. 
Quantifiable improvement in 
namecheck results year over 
year as new algorithms and 
functionality are implemented, 
process. Kecoro numoer or 
matches using new algorithms 
that would not have been 
handled correctly in the past. 


20.00% Increase in 
effectiveness 


70% increase in effectiveness 


80% increase in effectiveness 


2005 


Strategic Goal 3: Homeland 
Security, Strategic Goal 2: 
Counterterrorism, Strategic Goal 
5: International Crime and 
urugs, btrategic uoai 11. kudiic 
Diplomacy and Public Affairs 


Provide interagency and 
international agencies involved 
with Data Sharing the 
information of the denials of 
visas to toreign citizens wno 
would abuse or threaten the 
United States, while facilitating 
entry of legitimate applicants. 


50% 


100% of the data on the 
number of individuals denied a 
visa, as a result of information 
reported electronically in CLASS 
would oe provided. 


100% of the data on the 
number of individuals denied a 
visa, as a result of information 
reported electronically in CLASS 
would oe provided. 


2005 


Strategic Goal 12: Management 
and Organizational Excellence 


Maintain current Operations and 
Maintenance 


0% 


Maintain O&M within cost and 
schedule variances of nor more 
than 10% 


Maintained O&M within cost and 
schedule variances of less than 
10% 


2006 


Strategic Goal 12: Management 
and Organizational Excellence 


Maintain current Operations and 
Maintenance 


iLess than 10% 


Maintain O&M within cost and 
schedule variances of less than 
10% 


TBD 


2007 


Strategic Goal 12: Management 
and Organizational Excellence 


Maintain current Operations and 
Maintenance 


iLess than 10% 


Maintain O&M within cost and 
schedule variances of less than 
10% 


TBD 


2008 


Strategic Goal 12: Management 


Maintain current Operations and 


|Less than 10% 


Maintain O&M within cost and 


TBD 
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and Organizational Excellence 


Maintenance 




schedule variances of less than 
10% 





All new IT investments initiated for FY 2005 and beyond must use Table 2 and are required to use the Federal Enterprise Architecture (FEA) 
Performance Reference Model (PRM). Please use Table 2 and the PRM to identify the performance information pertaining to this major IT 
investment. Map all Measurement Indicators to the corresponding "Measurement Area" and "Measurement Grouping" identified in the PRM. 
There should be at least one Measurement I ndicator for at least four different Measurement Areas (for each fiscal year). The PRM is available 
at www.egov.gov. 



Performance I nformation Table 2: 



i 



Fiscal 
Year 


Measurement 
Area 


Measurement 
Cateqory 


Measurement 
Grouping 


Measurement 1 ndicator 


Baseline 


Planned 1 mprovement to 
the Baseline 


Actual Results 


2004 


Customer 
Results 


Service Coverage 


Frequency and 
Depth 


Number of Posts online to Server 
based CLASS system (eCLASS) 


10 initial posts 


15 posts 


18 posts 


2004 


Mission and 
Business Results 


Homeland Security 


Border and 

Transportation 

Security 


Data Sharing with other Agencies 


20% of Other 
Agency Data 
imported to CLASS 


25% of Other Agency Data 
imported to CLASS 


25% of Other Agency 
Data imported to CLASS 


2004 


Processes and 
Activities 


Management and 
1 nnovation 


Risk 


Minimize risk to CLASS 
vulnerabilities and maintain 
consistent up time availability of 
the CLASS system 


99.2% up time 
availability of 
CLASS system 


99.5 or better up time 
availability of CLASS 
system 


99.6% up time availability 
of CLASS system 


2004 


Technology 


Efficiency 


Response Time 


Response Time needs to be at the 
Current CLASS Response Time of 
15 seconds or less 80% of the 
time; and 1 minute or less for 90% 
of time 


1 minute 


15 seconds or less 


Less than 10 seconds on 
average 


2005 


Customer 
Results 


Service Coverage 


Frequency and 
Depth 


Number of Posts online to Server 
based CLASS system (eCLASS) 


Il0 initial posts 

• 


50 posts 


65 posts 


2005 


Mission and 
Business Results 


Homeland Security 


Border and 

Transportation 

Security 


Data Sharing with other Agencies 


Currently 25% of 
Other Agency Data 
imported to CLASS 


Increase +25% of Other 
Agency Data imported into 
CLASS 


65% increase of Other 
Agency Data 


or* a c 
ZVUD 


Processes ana 
Activities 


Management and 
1 nnovation 


KlSK 


Minimize risk to LLAbb 
vulnerabilities and maintain 
consistent up time availability of 
the CLASS system 


yy.b% up time or 
the availability of 
the CLASS system 


Maintain system availability 
at the 2005 level with 
CLASS availability at 99.6 
or better up time. 


Maintained tne yy.byo up 
time of the availability of 
the CLASS system 


2005 


Technology 


Efficiency 


Response Time 


Response Time needs to be at the 
Current CLASS Response Time of 
15 seconds or less 80% of the 
time; and 1 minute or less for 90% 
of time 


1 minute 


Less than 10 Seconds 


Average of 7 to 8 seconds 
response time. 


2006 


Customer 
Results 


Service Coverage 


Frequency and 
Depth 


Number of Posts online to Server 
based CLASS system (eCLASS) 


|65 posts 


All posts (Approximately 
243 posts) 


Approximately 243 posts 
as of 8/11/06 


2006 


Customer 
Results 


Service Quality 


Accuracy of 
Service or Product 
Delivered 


Better data quality results from 
CLASS with a reduction in Alias 
hits, duplicate records and name 
variants 


25% reduction in 
Alias hits, duplicate 
records and name 
variants 


30% reduction in Alias hits, 
duplicate records and name 
variants 


As of 7/31/06, a 30% 
reduction in Alias hits, 
duplicate records and 
name variants 


2006 


Mission and 
Business Results 


|l nformation and 
Technology 


|l nformation 
Management 


Data Quality Standards with other 
Agencies 


No Data Element 
Standards with 


Development of Data 
Element Standards with at 


|As of the March 2006, 
Data Element Standards 
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Management 






other Agencies 


least 2 other Agencies 


have been developed with 
FBI and DHS. 


ZUUb 


Processes and 
Activities 


Management ana 
1 nnovation 


KlSK 


Minimize nsK to CLAbb 
vulnerabilities and maintain 
consistent up time availability of 
the CLASS system 


yy.byo up time 
availability of the 
CLASS System 


l\ fl ""^ I UK ^K «K | UK ^K. . _ X> — K UKaK ^K a ■ ^K | 1 — , 1— « ill 4" » ■ 

Maintain system avaiiaDinty 
at the 2005 level with 
CLASS availability at 99.6 
or better up time. 


Average ot yy.y% up 
time availability of the 
CLASS system as of 
7/31/06 


2006 


Technology 


Efficiency 


Response Time 


Response Time needs to be 
maintainea to ensure CLAbb 
Response Time for hits to be 
returned at an average of less than 
10 seconds. 


Average response 
time / to 0 
seconds 


Maintain the current 

1 \ a M f—, U> «K > .J > . u> ^K UK JK UK ^K — K ■ UKaK ^K, ^K / 

average response time ot / 
to 8 seconds 


Currently 7 seconds 

1 ' — *v a # . a/* ■ v M > — v f—, , a*ak - — v ua. . ^ — v 4— a a—V'-X <—» ' — \ , 

average response time as 
of 7/31/06 


ZUU / 


customer 
Results 


bervice coverage 


hrequency ana 
Depth 


IV III I— V - \ l—. , — , I— v — v 4- 1 1 t — S / 4— / v — v UK | | m — v ^ — ^ 4— — S E > — 1 — \ m / — s ua 

Numoer ot Posts online to berver 
based CLASS system (eCLASS) 


Z4:5 


l\ It ""a ■ L' — S 4— *~ ■> I L' — S 4— I— \ i^-l <— I I "* I- l-l UK J— UK j—. f— J— / 

Maintain tne current posts 
(243 posts) online to Server 
based CLASS system 
(eCLASS) 


1 dU 


ZUU / 


f 1 1 1"""* 4"" /""v l"v^ /"*\ i*" 

customer 
Results 


bervice quality 


Accuracy or 
Service or Product 
Delivered 


better aata quality results rrom 
CLASS with a reduction in Alias 
hits, duplicate records and name 
variants 


juto reauction in 
Alias hits, duplicate 
records and name 
variants 


jdto reauction in Alias nits, 
duplicate records and name 
variants 


1 bu 


zUU / 


Mission ana 
Business Results 


Homeiana becurity 


boraer ana 

Transportation 

Security 


1 i - — \ 4— — > f \ ■ ■ — > I ■ 4—\ / E 4— ■ — , a--\ j — J ■ — \ u> j — J t — i ■ ■ ■ 4— 1— , j — v 4— 1— , > — v u 

Data Quality btanaaras witn otner 
Agencies 


1 1 k 4- ""^ 1 1 *~ V ""V^V UK 4— 

Data clement 
Standards with 2 
other agencies 
(FBI and DHS) 


1 a--\ J— "* J—\ • \ J <- > J <— > a / <— > 1 * > UK |*A V ^ UK J— >— , 4- 

increase aeveiopment ot 
Data Element Standards 
with 2 more other agencies 


1 bD 


zuU / 


processes ana 
Activities 


Management ana 
1 nnovation 


D ii-L- 

KlSK 


Minimize nsK to CLAbb 
vulnerabilities and maintain 
consistent up time availability of 
the CLASS system 


Average ot yy.yyo 
up time availability 
of the CLASS 
system 


Maintain system avauauiiity 
at the 2006 level with 
CLASS availability at 99.6 
or better up time. 


tdh 
1 bU 


2007 


Technology 


Efficiency 


Accessibility 


Response Time needs to be 
maintainea to ensure CLAbb 
Response Time for hits to be 
returned at an averaae of less than 
10 seconds. 


Average of 7 to 8 
seconas 


Maintain the current 

■ — ^ m m f — \ ua aaK > — * , — ^ ua , — ^ / UK a uk ^ v — ^ 4— 1 l—Vi- \ — \ v — v 4- 7 

average response time ot / 
to 8 seconds 


TBD 


2008 


Customer 
Results 


Service Coverage 


Frequency and 
Depth 


Number of Posts online to Server 
based CLASS system (eCLASS) 


|TBD at end of FY07 


|TBD at end of FY07 


TBD 


ZUUo 


customer 
Results 


bervice quality 


Accuracy ot 
Service or Product 
Delivered 


better aata quality results irom 
CLASS with a reduction in Alias 
hits, duplicate records and name 
variants 


Ton -it- csr\r\ /-»f CVO "7 

i bu at ena ot riu/ 


TDn -it- r\r\r\ n,f CVH7 

i bu at ena ot nu/ 


tr n 
1 bU 


2008 


Mission and 
Business Results 


Homeland Security 


Border and 

Transportation 

Security 


Border and Transportation Security 


h"BD at end of FY07 


[TBD at end of FY07 


TBD 


zUUo 


processes ana 
Activities 


Management ana 
Innovation 


KlSK 


Minimize nsK to CLAbb 
vulnerabilities and maintain 
consistent up time availability of 
the CLASS system 


i bu at ena ot rYU/ 


i bu at ena ot riu/ 


tdh 
1 bU 


?00R 

t- \J\JO 


Tprh nnlnm/ 


Fff iripnrv 


A rrpQQ i h i 1 ifv 


RpcnnnQP Timp npprlQ fn hp 

rvCDUUI DC 1 II 1 IC 1 ICCUj LVJ kJC 

maintained to ensure CLASS 
Response Time for hits to be 
returned at an average of less than 


Awpranp nf 7 tn R 

aavci aye w i / lu u 

seconds 


Mpinfain fhp nirrpnt 

l v ICIIIILCIIII LI IC LUI 1 CI IL 

average response time of 7 
to 8 seconds 


TRD 
i i_j i_y 
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llO seconds. 



I .E. Security and Privacy 

I n order to successfully address this area of the business case, each question below must be answered at the system/ application level, not at 
a program or agency level. Systems supporting this investment on the planning and operational systems security tables should match the 
systems on the privacy table below. Systems on the Operational Security Table must be included on your agency Fl SMA system inventory and 
should be easily referenced in the inventory (i.e., should use the same name or identifier). 

All systems supporting and/ or part of this investment should be included in the tables below, inclusive of both agency owned systems and 
contractor systems. For IT investments under development, security and privacy planning must proceed in parallel with the development of 
the system/ s to ensure IT security and privacy requirements and costs are identified and incorporated into the overall lifecycle of the 



system/ s. 

Please respond to the questions below and verify the system owner took the following actions: 

1. Have the IT security costs for the system(s) been identified and integrated into the overall costs of the investment: Yes 
a. If "yes," provide the "Percentage IT Security" for the budget year: 15 

2. I s identifying and assessing security and privacy risks a part of the overall risk management effort for each system supporting Yes 
or part of this investment. 

5. Have any weaknesses related to any of the systems part of or supporting this investment been identified by the agency or IG? No 
a. If "yes," have those weaknesses been incorporated agency's plan of action and milestone process? Yes 

6. I ndicate whether an increase in IT security funding is requested to remediate IT security weaknesses? No 



a. If "yes," specify the amount, provide a general description of the weakness, and explain how the funding request will remediate the 
weakness. 



I .F. Enterprise Architecture (EA) 

I n order to successfully address this area of the business case and capital asset plan you must ensure the investment is included in the 
agency's EA and Capital Planning and I nvestment Control (CPI C) process, and is mapped to and supports the FEA. You must also ensure the 
business case demonstrates the relationship between the investment and the business, performance, data, services, application, and 
technology layers of the agency's EA. 

1. I s this investment included in your agency's target enterprise architecture? Yes 
a. If "no," please explain why? 
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2. Is this investment included in the agency's EA Transition Strategy? 

a. If "yes," provide the investment name as identified in the Transition Strategy provided in the agency's most recent annual EA 
Assessment. 



b. If "no," please explain why? 



Yes 

Consular 

Lookout 

and 

Support 
System 



3. Service Reference Model (SRM) Table: 

Identify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship 

management, etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to 
http:/ / www.whitehouse.gov/ omb/ egov/^ 




A nan r\t C n im nnnont 1 
Hyciiwy v_uiiifJuiifc;iiL 

Name 


/-\yt;iiL.y v-uiiijjuiitiiii. ucaLi iljlilhi 


Service 
Domain 


1 FEA SRM 
Service Type 


CCA CRM 

Component 


CCA Coniira 

Component 
Reused Name 


rtH JCI VILC 

Component 
Reused UPI 


1 nfornal 
1 II LCI lldl 

or 
External 
Reuse? 


Pun r\ i n n 
D I ■ LIIIL1IIILJ 

Percentage 


Asset Cataloging / 
Identification 


Defines the set of capabilities that support 
the listina and specification of available 
assets. 


Back Office 
Services 


lAsset / 

Materials 

Management 


Property / Asset 
Management 






No Reuse 


2 


Data Classification 


Allow the classification of Data 


Back Office 
Services 


Data 

Management 


Data 

Classification 






No Reuse 


5 


Data Exchange 


Defines the set of capabilities that support 
the interchange of information between 
multiple systems or applications. 


Back Office 
Services 


Lata 

Management 


Data Exchange 






No Reuse 


3 


Data Mart 


Defines the set of capabilities that support a 
subset of a data warehouse for a single 
department or function within an 
organization. 


Back Office 
Services 


Lata 

Management 


Data Mart 






No Reuse 


0 


Data Recovery 


Defines the set of capabilities that support 
the restoration and stabilization of data sets 
to a consistent, desired state. 


Back Office 
Services 


Data 

Management 


Data Recovery 






No Reuse 


3 




Defines the set of capabilities that support 


1 

Back Office 
Services 


1 

Data 

Management 












Data Warehouse 


the archiving and storage of large volumes 
of data. 


Data Warehouse 






No Reuse 


2 


Loading and Archiving 


Defines the set of capabilities that support 
the population of a data source with 
external data. 


1 

Back Office 
Services 


1 

Data 

Management 


Loading and 
Archiving 






No Reuse 


2 


Meta Data 
Management 


Defines the set of capabilities that support 
the maintenance and administration of data 
that describes data. 


Back Office 
Services 


1 

Data 

Management 


Meta Data 
Management 






No Reuse 


2 


Configuration 
Management 


Defines the set of capabilities that control 
the hardware and software environments, 
as well as documents of an organization. 


Back Office 
Services 


i 

Development 
and Integration 


Data Integration 






No Reuse 


3 


Data Integration 


Defines the set of capabilities that support 


Back Office 


Development 


Data Integration 






No Reuse 


3 
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the organization of data from separate data 
sources into a single source using 
middleware or application integration and 
the modification of system data models to 
capture new information within a single 
system. 


Services 


and Integration 












Enterprise Application 
Integration 


1 1 ^"V \ m ■ UK ^K, |>K — K dK ^K ik ^K M UK laK ill ■ *K <k Lk ^K ^K ^K | | UK UK ^K UB *^ 

uerines tne set or capabilities tnat support 
the redesigning of disparate information 
systems into one system that uses a 
common set of data structures and rules. 


Back Office 
Services 


Development 
and Integration 


Enterprise 
Application 
1 ntegration 






No Reuse 


3 


Instrumentation and 
Testing 


Defines the set of capabilities that support 
the validation of application or system 
capabilities and requirements. 


1 

Back Office 
Services 


Development 
and Integration 


1 

1 nstrumentation 
and Testing 

1 






No Reuse 


1 

3 


Legacy 1 ntegration 


Defines the set of capabilities that support 
tne communication between newer 
generation hardware/ software applications 
and the previous, major generation of 
hardware/ software applications. 


Dci\_lv Ul 1 IL.tr 

Services 


Dov/olnn m ant 
L/cvt:IU|J.llt:IIL 

and Integration 


Ley ciL.y 

Integration 






No Reuse 


2 




Defines the set of capabilities that support 
the creation of both graphical and process 
application or svstem software. 


I 




i 










Software 
Development 


Back Office 
Services 


Development 
and Integration 


Software 
Development 






No Reuse 


5 


ppni i i rc»mc*n1"c; 

rxCLj U 1 1 1. 1 I 1 1. 1 I Lo 

Management 


Defines the set of capabilities for gathering, 
analyzing and fulfilling the needs and 
prereduisites of an orqanization's efforts. 


DCIv_In. Wlllv_C 

Services 


iHuman Capital 
/ Workforce 
Management 


IContingent 

Workforce 

Management 






No Reuse 


L 


Management of 


Defines the set of capabilities for the 
management and control of a particular 
effort of an omanization. 


Back Office 


Human Capital 
/ Workforce 
Management 


Team / Org 






No Reuse 


|5 


Process 


Services 


Management 






OLAP 


Support the analysis of information that has 
been summarized into multi-dimensional 
views and hierarchies. 


Business 

Analytical 

Services 


Reporting 


OLAP 






No Reuse 




Customer/ Account 
Management 


Defines the set of capabilities that support 
the retention and delivery of a service or 
product to an omanization's clients. 


Customer 
Services 


Customer 

Relationship 

Management 


Customer / 

Account 

Management 






No Reuse 


2 


Content and 
Publishing Delivery 


Allow for the propogation of interactive 
programs 


Digital Asset 
Services 


Lontent 
Management 


Content 
Publishing and 
Delivery 






No Reuse 


l 2 


1 nformation/Mapping 
Taxonomy 
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uetines tne set ot capaoiiities tnat support 
the creation and maintenance of 
relationships between data entities, naming 


Digital Asset 
Services 


| 

Knowledge 
Management 


1 nformation 
Mapping / 
Taxonomy 






No Reuse 




2 




standards and cateqorization. 

*««* 














Information Retrieval 


befines the set of capabilities that allow 
access to data and information for use by an 
organization and its stakeholders. 


Digital Asset 
Services 


knowledge 
Management 


1 nformation 
Retrieval 






No Reuse 


1 

3 


Information Sharing 


1 1 ^"N "T~ I UK ^K ^K. ^K L>K^ /K ^K ^K ^K <L ^« ^K UK «K. L— , ill I ^K. ^K ^k Lk «K ^K ■ ■ UK UK ^K U> ^K 

uetines tne set ot capaoiiities tnat support 
the use of documents and data in a multi- 
user environment for use by an organization 
and its stakeholders. 


Digital Asset 
Services 


Knowledge 
Management 


1 nformation 
Sharing 






No Reuse 


2 


Audit Trail Capture 
and Analysis 


Defines the set of capabilities that support 
the identification and monitoring of activities 


Digital Asset 
Services 


Records 
Management 


Digital Rights 
Management 






No Reuse 
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within an application or svstem. 
















Query 


Defines the set of capabilities that support 
retrieval of records that satisfy specific 
ouerv selection criteria. 


Digital Asset 
Services 


Records 
Management 


Digital Rights 
Management 






No Reuse 


4 


Records 

Linking/ Association 


Defines the set of capabilities that support 
the correlation between logical data and 
information sets. 


Digital Asset 
Services 


[Records 
Management 


Record Linking / 
Association 






No Reuse 








Process 

Automation 

Services 


bracking and 
Workflow 


Case 

Management 






No Reuse 


|3 


Role/Privelege 
Management 


Defines the set of capabilities that support 
the granting of abilities to users or groups of 
users of a computer, application or network. 


Support 
Services 


Collaboration 


Document Library 






No Reuse 


L 
1 


Security Services - 
Access Control 


Process to include appropriate policies, 
executed to maintain the integrity of the 
organization's information security layers 
(i.e. coniidentiaiity, integrity, access control, 
non-repudiation, identification and 
authentication, audit and system 
availability). 


Support 
Services 


Security 
Management 


MX S — 1 a- I — ' » 1— / t f—t t—t 4— V*- j — i 1 

Access control 






No Reuse 




User Management 


Defines the set ot capabilities that support 
the administration of computer, application 
and network accounts within an 
organization. 


Support 
Services 


Security 
Management 


Audit Trail 
Capture and 
Analysis 






No Reuse 


2 


License Management 


uetines tne set ot capaomties tnat support 
the purchase, upgrade and tracking of legal 
usage contracts for system software and 
applications. 


Support 
Services 


Systems 
Management 


License 
Management 






No Reuse 


2 


Remote Systems 
Control 


Defines the set of capabilities that support 
tne monitoring, administration and usage ot 
applications and enterprise systems from 
locations outside of the immediate system 
environment. 


Support 
Services 


Systems 
Management 


Remote Systems 
Control 






No Reuse 


5 


Software Distribution 


uetines tne set ot capaomties tnat support 
the propagation, installation and upgrade of 
written computer programs, applications 
and components. 


1 

Support 
Services 


Systems 
Management 


Software 
Distribution 






No Reuse 


r 


System Resource 
Monitoring 


DpfinPQ thp <^pf nf ranahilifiPQ that Qimnnrt 
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the balance and allocation of memory, 
usage, disk space and performance on 
computers and their applications. 


Support 
Services 


Systems 
Management 


System Resource 
Monitoring 






No Reuse 


2 



Use existing SRM Components or identify as "NEW". A "NEW" component is one not already identified as a service component in the FEA 
SRM. 

A reused component is one being funded by another investment, but being used by this investment. Rather than answer yes or no, identify 
the reused service component funded by the other investment and identify the other investment using the Unique Project I dentifier (UPI ) 
code from the OMB Ex 300 or Ex 53 submission. 
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'Internal' reuse is within an agency. For example, one agency within a department is reusing a service component provided by another 
agency within the same department. 'External' reuse is one agency within a department reusing a service component provided by another 
agency in another department. A good example of this is an E-Gov initiative service being reused by multiple organizations across the federal 
government. 

Please provide the percentage of the BY requested funding amount used for each service component listed in the table. If external, provide 
the funding level transferred to another agency to pay for the service. 



4. Technical Reference Model (TRM) Table: 



To demonstrate how this major IT investment aligns with the FEA Technical Reference Model (TRM), please list the Service Areas, Categories, Standards, and 

Service Specifications supporting this IT investment. 



FEA SRM Component 


FEA TRM Service Area 


FEA TRM Service 
category 


FEA TRM Service Standard 


Service Specification (i.e. vendor or product 

name) 


, 

ISoftware Development 


|Component Framework 


Business Logic 


|Platform Dependent 


C-Sharp (C#) 


bottware Development 


Component Framework 


Business Logic 


Platform Dependent 


VB Script 


bottware Development 


component Framework 


business Logic 


riattorm Dependent 


1 1 I 1 I ■ ■ v 1 1 J ■ v I ■ 

visual basic 


bottware Development 


i 1 

/ , — . ill ji ■ — . > — ^ ■i-h > — v ■i-h -4 — I . — . t ill il , — * ■ B ■ > — - . — 1 f 

Component Framework 


business Logic 


Platform Dependent 


visual basic .Net (vb.Net) 


ULAP 


component Framework 


Data Management 


Reporting and Analysis 


uniine Analytical Processing (ULAP) 


Content Publishing and 
Delivery 


Component Framework 


Presentation / 1 nterface 


Content Rendering 


Dynamic HTML (DHTML) 


Content Publishing and 
Deliverv 


Component Framework 


Presentation / 1 nterface 


Dynamic Server-Side Display 


Active Server Pages (ASP) 


Content Publishina and 
Delivery 


Component Framework 


Presentation / 1 nterface 


Dynamic Server-Side Display 


I 

jActive Server Pages .Net (ASP. Net) 


Content Publishing and 
Delivery 


component rrameworK 


rresentaLion / i nLeriace 


z>LdLic uispiay 


nyper lexi i v iarKup Language ^nii v iLj 


Access Control 


Component Framework 


Security 


Certificates / Digital Signatures 


Digital Certificate Authentication 


|Access Control 


Component Framework 


Security 


Certificates / Digital Signatures 


|Secure Sockets Layer (SSL) 


Access Control 


Service Access and Delivery 


Access Channels 


Other Electronic Channels 


System to System 


Access Control 


|Service Access and Delivery 


Access Channels 


Web Browser 


1 nternet Explorer 


Requirements Management 


Service Access and Delivery 


Service Requirements 


Hosting 


[External (ISP/ASP/FirstGov) 


(Requirements Management 


Service Access and Delivery 


Service Requirements 


|Hosting 


Internal (within Agency) 


Content Publishing and 
Delivery 


1 — 

Service Access and Delivery 


Service Requirements 


Legislative / Compliance 


Section 508 


(Access Control 


Service Access and Delivery 


Service Requirements 


Legislative / Compliance 


Security 


Data Exchange 


Service Access and Delivery 


Service Transport 


Service Transport 


Hyper Text Transfer Protocol (HTTP) 


Data Exchange 


Service Access and Delivery 


Service Transport 


Service Transport 


Hyper Text Transfer Protocol Secure (HTTPS) 


Data Exchange 


Service Access and Delivery 


Service Transport 


Service Transport 


Internet Protocol (IP) 


|Data Exchange 


Service Access and Delivery 


Service Transport 


|Service Transport 


[Transport Control Protocol (TCP) 


Legacy 1 ntegration 


Service Interface and 
1 ntegration 


1 ntegration 


1 

Middleware 


Backup Operations Server to Mainframe 


Data Integration 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


Database Access: ISQL/w 
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Data Integration 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


[Database Access: NET8 


Data Integration 


Service Interface and 
1 ntegration 


1 ntegration 


Middleware 


Remote Procedure Call (RPC) 


Data Classification 


Service Interface and 
1 ntegration 


1 nteroperability 


Data Format / Classification 


extensible Markup Language (XML) 

I 


Data Classification 


Sprvirp 1 nfprfarp and 
|l ntegration 


1 nteroperability 


Data Types / Validation 


|xML Schema 


Case Management 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


Oracle 


Case Management 


Service Platform and 
1 nfrastructure 


Database / Storage 


Storage 


Storage Area Network (SAN) 


Case Management 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Web Servers 


Internet Information Server 


Case Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Embedded Technology Devices 

1 


Hard Disk Drive 


Case Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


1 

Embedded Technology Devices 


Microprocessor 










Case Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


1 

Embedded Technology Devices 


Random Access Memory (RAM) 


Case Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Embedded Technology Devices 


Redundant Array of Independent Disks (RAID) 


Case Management 


IService Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Peripherals 


Printer 


Case Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Peripherals 


Scanner 










Case Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Iservers / Computers 


Enterprise Server 


Enterprise Application 
Integration 


Service Platform and 
1 nfrastructure 


Software Engineering 


Intearated Development 
Environment 


l 

Visual Studio. Net 


Software Development 


Service Platform and 
1 nfrastructure 


Software Engineering 


Modeling 


Unified Modeling Language (UML) 


Configuration Management 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Confiauration 
Management 


Change Management 


Configuration Management 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Configuration 
Management 


Defect Tracking 


Configuration Management 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Confiauration 
Management 


Deployment Management 


Configuration Management 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Configuration 
Management 


Requirements Management and Traceability 


Case Management 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Confiauration 
Management 


Version Management 


Instrumentation and Testing 


Service Platform and 
1 nfrastructure 


Software Engineering 


Test Management 


Functional Testing 


Instrumentation and Testing 


Service Platform and 
1 nfrastructure 


Software Engineering 


Test Management 


1 

1 nstallation Testing 
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Instrumentation and Testing 


Service Platform and 
1 nfrastructure 


Software Engineering 


Test Management 


Load/Stress/Volume Testing 


Instrumentation and Testing 


Service Platform and 
1 nfrastructure 


Software Engineering 


Test Management 


1 

Usability Testing (508 Testing) 


bottware Distribution 


Service Platform and 
1 nfrastructure 


bupport Platforms 


Platform Dependent 


Windows zuuo 


Software Distribution 


Service Platform and 
1 nfrastructure 


Support Platforms 


1 

Platform Dependent 


Windows. Net 



Service Components identified in the previous question should be entered in this column. Please enter multiple rows for FEA SRM 
Components supported by multiple TRM Service Specifications 

I n the Service Specification field, Agencies should provide information on the specified technical standard or vendor product mapped to the 
FEA TRM Service Standard, including model or version numbers, as appropriate. 



5. Will the application leverage existing components and/ or Yes 
applications across the Government (i.e., FirstGov, Pay.Gov, etc)? 

a. If "yes," please describe. 

CLASS receives and sends Visa lookout data from external agencies and organizations. By centralizing and cleaning up this data, this allows better data sharing and reuse data 
handling processes. Streamlining the data sharing process will reduce the number of duplicate records and energy spent to maintain these interchanges. It will also provide the 
best practices to easily implement future data sharing requirements and will allow Consular Systems Division to conitnue to evaluate and propose Government wide revisions to 
components and applications in order to leverage more support for the objectives of the CLASS system and its mission objectives. 



6. Does this investment provide the public with access to a 
government automated information system? 

a. If "yes," does customer access require specific software (e.g., a 
specific web browser version)? 

1. If "yes," provide the specific product name(s) and version 
number(s) of the required software and the date when the public will 
be able to access this investment by any software (i.e. to ensure 
equitable and timely access of government information and services). 



No 



Exhibit 300: Part III: For "Operation and Maintenance" investments ONLY (Steady State) 



1 1 1 .A. Risk Management 



Part 1 1 1 should be completed only for investments which will be in "Operation and Maintenance" (Steady State) in FY 2008, i.e., selected the 
"Operation and Maintenance" choice in response to Question 6 in Part I, Section A above. 

You should have performed a risk assessment during the early planning and initial concept phase of this investment's life-cycle, developed a 
risk-adjusted life-cycle cost estimate and a plan to eliminate, mitigate or manage risk, and be actively managing risk throughout the 
investment's life-cycle. 

Answer the following questions to describe how you are managing investment risks. 
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1. Does the investment have a Risk Management Plan? 

a. If "yes," what is the date of the plan? 

b. Has the Risk Management Plan been significantly changed since 
last year's submission to OMB? 

Ci If yes, describe any significant changes* 

2. If there currently is no plan, will a plan be developed? 

a. If "yes," what is the planned completion date? 

b. If "no," what is the strategy for managing the risks? 



Yes 

11/06/2006 
No 
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